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The general conditions for the orthogonal product states of the multi-state systems to be used in 
quantum key distribution (QKD) are proposed, and a novel QKD scheme with orthogonal product 
states in the 3x3 Ifilbert space is presented. We show that this protocol has many distinct features 
such as great capacity, high efficiency. The generalization to n x n systems is also discussed and a 
fancy limitation for the eavesdropper's success probability is reached. 
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I. INTRODUCTION 



Cryptography is created to satisfy the people's desire of transmitting secret messages. With the development of 
the quantum computation, especially the proposal of Shor's algorithm 0, the base of the most important classic 
cryptographic scheme was shocked. But at the same time, the principles of quantum mechanics have also shed 
new light on the field of cryptography as these fundamental laws guarantee the secrecy of quantum cryptosystems. 
Any intervention of an eavesdropper, Eve, must leave some trace which can be detected by the legal users of the 
communication channel. All kinds of quantum key distribution (QKD) schemes, such as BB84 protocol B92 
protocol and the EPR scheme Q have been proposed. Recently, quantum cryptography with 3-state systems was 
also introduced ||^. Experimental research on QKD is also progressing fast, for instance, the optical- fiber experiment 
of BB84 and B92 protocols have been realized up to 48 km and QKD in free space for B92 scheme has been 
achieved over 1 km distance 0. 

In paper Lior and Lev presented a quantum cryptography based on orthogonal states firstly. Then there is 
quantum cryptographic scheme involving truly two orthogonal states The basic technic is to split the transfer 
of one-bit information into two steps, ensuring that only a fraction of the bit information is transmitted at a time. 
Then the non-cloning theorem of orthogonal states guarantee its security. Based on the impossibility of cloning 
nonorthogonal mixed states, the no-cloning theorem of orthogonal states says that the two (or more) orthogonal 
states Pi {AB) of the system composed of A and B cannot be cloned if the reduced density matrices of the subsystem 
which is available first (say A) pi {A) = Ttb [pi {AB)] arc nonorthogonal and nonidentical, and if the reduced density 
matrices of the second subsystem are nonorthogonal. It is a very surprising result since it means that entanglement 
is not vital for preventing cloning of orthogonal states. In the case of a composite system made of two subsystems, 
if the subsystem are only available one after the other, then there are various cases that orthogonal states cannot be 
cloned. 

For the multi-state systems, Bennett et al. have shown that there are orthogonal product pure states in the 3x3 
Hilbert space and proved that these states may have some degree of nonlocality without entanglement There 
was also experimental demonstration of three mutually orthogonal polarization states [p^ , where biphotons are used 
as multi-state systems. 

We propose the general conditions for the orthogonal product states of the multi-state composite systems to be used 
in QKD, then present a QKD scheme with the orthogonal product states of 3 x 3 system which has several distinct 
features, such as high efficiency and great capacity. The generalization to the rt-state systems, and eavesdropping is 
analyzed where a peculiar limitation, 1/2, for the success probability of an efficient eavesdropping strategy is found 
as n becomes large enough. 
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II. THE QKD SCHEME WITH ORTHOGONAL PRODUCT STATES 



In the present QKD scheme with orthogonal product states in the n x n Hilbert space, the transmission processing 
is same as the QKD scheme with common orthogonal states 1^. The information is encoded in the holistic state 
of the two particles, and these two particles are sent separately to ensure that any eavesdropper can not hold both 
particles at the same time. Since only orthogonal product state are employed, operations on one subsystem have no 
effect to the other. There are some basic conditions for any set of orthogonal product states in the n-state composite 
systems to be used in the present QKD scheme: for any density matrix of any subsystem, pi (P) , there must be at 
least one pj (P) which is both nonidentical and nonorthogonal to pi (P) . (P represents subsystem A or B. i and j 
represent different states of the set.) Then from the point of any subsystem the standard non-cloning theorem 
I p^ is satisfied, this guarantees the security of the protocol. What's more, we can transmit 2 log2 n bits information, 
double the value of existing QKD protocol with usual orthogonal states . It is evident that this is the maximal 
information that can be transmitted by the n x n system. 

For 2x2 system, there is obviously no such orthogonal product states that satisfy the orthogonal states cryptography 
conditions. The reason is that if po (P) are nonidentical and nonorthogonal to pi (P), then po (A) (X) po (B) can not 
be orthogonal to pi (A) ® pi (B) . 

Next, we consider the 3x3 system. A general set of orthogonal product states in this Hilbert space is as following 

*i = |1>a(«|1>b + M0)s), 
vI/2-|l)^(6*|l)5-a*|0)5), 
vl/3 = (c|l)^+d|0)^)|2)5, 
vl/4 = (d*|l)^-c*|0)^)|2)5, 

*5 = |2)^(e|0)5 + /|2>5), (1) 
^, = \2)^ir\0)s-e*\2)s), 
^7 = {g\0)^ + h\2)^)\l)s, 
^s = {h*\0)^^g*\2)^)\l)^, 
*9 = |0)^|0)^, 

where a, b, c, d, e, /, g, h are complex number and |a|^ + \b\^ = |c|^ + \d\'^ = |e|^ + |/|^ = \g\^ + \h\^ = 1. 

This set of states has been proved to have some degree of nonlocality without entanglement, when a = b = c = 
d=e = f = g = h = 1/V2 For the general case, no satisfying proof for the existing of the nonlocality has been 
found yet. But if they satisfy the conditions mentioned above, they can still be used in this QKD scheme. 

The process of this QKD scheme is as follows: 1. Alice prepares two particles A and B randomly in one of the nine 
orthogonal product states shown above and sends particle A to Bob, when Bob receives it, he informs Alice through 
open classical channel. Then Alice sends out particle B. When particle A and B are both in the hand of Bob, he 
makes a collective orthogonal measurement under the basis of Eqs. (1) to determine which state the two-particle 
system has been prepared. After a sequence of this procedure, they can share a random bit string, which is the raw 
keys. 2. In order to find possible eavesdropping, Alice and Bob randomly compare some bits to verify whether the 
correlations have been destroyed. If it is true with as high probability as they require, it can be believed that there is 
no eavesdropper and all of the rest results can be used as cryptographic keys. Otherwise, all the keys are discarded 
and they must be redistributed. 

What is vital to this scheme is that Alice sends the second particle only when the first one reaches Bob to eliminate 
the possibility of any eavesdropper to possess the two particles at the same time. This protocol has some distinct 
features. As all raw keys except a small portion chosen for checking eavesdroppers is usable, it is very efficient (nearly 
100%), and it has large capacity since log2 9 bits information is transmitted by a 3 x 3 system. 



III. EAVESDROPPING AND THE GENERALIZATION TO THE iV-STATE SYSTEM 

We first consider one efficient eavesdropping strategy. In this strategy. Eve measures the first particle from Alice 
and sends it to Bob. She measures the second particle corresponding to the measurement result of the first one and 
sends it to Bob. It has been found that with this strategy. Eve has the success eavesdropping probability as high as 
0.94 for QKD with orthogonal states in the 2x2 Hilbert space [ p^ . 

The eavesdropping is as following. Eve intercepts particle A and makes an orthogonal measurement in the basis 
{|0) , |1) , |2)}. Suppose particle A is found in state |1)^, Eve knows that the two-particle states of A and B is ^ti, ^'2 
with probability 1/9 respectively, or ^3, '^4 with probability |c|^ /9 and \d\^ /9, respectively. Then she sends it to Bob. 
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When particle B comes, she intercepts it too and measures it in the basis {|2)j 
then sends it to Bob. If Eve sees that particle i? is in a |1)^ + b |0)^ or & 11)^ — a \0)g, then obviously she knows that 
the two-particle state is ^lov In this case she is lucky enough to conceal from Alice and Bob for the two-particle 
state is not disturbed. And if Eve finds particle B in state \2)g, then the two-particic state is or ^'4, which has 
collapsed to |1)^ IS)^, then Bob has the partial probability of |c|^ or |(i|^ to find the two-particle state in 'i/^ or '^4, 
respectively. So it is clear that for the case Eve measures the particle A in the state the probability for he to 

eavesdrop without being detected is ^2 -|- |c|* -|- /9. Analyzed in the same way, the total probability that Eve 
eavesdrops the key information without being detected is 

Ps = 5/9 + 2(|c|* + \d\^ + \hf + \gf)/9. (2) 

Then it is evident that P3 gets the minimal value of 7/9 when |c|^ — \d\^ = \h\^ = \g\^ = 1/2. 

We depict this set of states in the 3x3 Hilbert space in a visual graphical way as Figure 1 shows. The four dominoes 
represent the four pairs of states that involve superposition of the basis states |0), |1) or |2). It is obvious that this 
figure is 4- fold rotation symmetric, and we will show later that this symmetry is one of the basic requirements for 
there may be two symmetrical eavesdropping strategies. From this figure we can obviously see that all the states 
included in one row, where particle A is in basis states, can be eavesdropped without being detected in this strategy. 
But for all other states, there is only certain probability, the quartic of probability amplitude of the superposition 
states of particle A in the basis states, for Eve's success eavesdropping. Then the total probability is P3. Now let's 
consider the case of n x n system. Since we only utilize orthogonal product states, and any superposition of n basis 
states that covers all the grids of any row (any column) in the graphic depiction will surely be distinguished by Eve 
which will have no use in the present QKD scheme. In other words, any set of states including such superposition 
state will violate the above conditions, then the possible superposition states can just be the ones of less than n basis 
states which cover no more than n — 1 grids of the figures. The 4x4 system can be depicted in Figure 2. We can 
see that the only difference between the figures of the 3x3 and 4x4 systems is that there arc; four states in the 
center of the 4x4 system, which can be eavesdropped without being detected. Then generalized straightforwardly, 
the 2n x 2n system can be analyzed in the similar way as the (2n — 1) x (2n — 1) system. Thus here we take the 
(2n — 1) X (2n — 1) system for example, (n = 2,3,4, ...). 

The figure 3 depicts a set of orthogonal product states of the 5x5 system, which is generalized straightforwardly 
from 3x3 system. For any complete set of orthogonal product states, the success probability for Eve to eavesdropping 
without being detected is 



9P3 + 8+(^ \aj^^ 

k,i,J 



k,i,J 



/25, 



(3) 



where aj.^ |/)^ is the probability amplitude of the superposition states of particle A in the basis states and ^ aj. 

1 for any \l) g , k and i, and \l) g means that particle B is in the basis state \l) k denotes dominoes in line l^^, ik 
denotes the superposition states in domino k, and Ji^ denotes the basis states that superposition state ik involves, 
P3 is Eve's success probability for the 3x3 system and 8/25 is the probability for states in row |3)^ and |4)^. We 
know from the graph that the dominoes in column \3) g and \4) g cover 4 grids in total (If 5 grids are covered, all 
the states in this column can be eavesdropped without being detected.), and we have shown that Ji^ < 4. It can 
be proved easily that P5 reaches its minimal value 17/25 when P3 gets its minimal value and only one domino is in 



column |3)^ or |4)^ and 



= 1/4. This corresponds to the set of states depicted in Figure 3. Then for the 



(2n -|- 1) X (2n -|- 1) system, the success probability is 



P2n+1 — 



I 4 I 

{2n-lf X P2n-i + 4n + (Y, aj.j2n-i>^ + E r-^' 



/(2n + l)^ 



The minimal probability can be obtained similarly: 

min{P2„+i} = [(2n - 1)^ x min{P2„_i} + 4n + 2] /(2n + 1)^ = 1/2 + (1 + 4n)/2(2n + 1)^, 
where n > 1. We can deduce immediately that this value approaches 1/2 when n gets large enough. 



(4) 
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Of course, there are other ways of plotting the graph symmetricaUy. But this set of states is of the most secure. In 
fact, the value of niin{P2ra+i } can be deduced straightforwardly from the symmetry of the plot. For any vertical domino 
contributes l/(2n+ 1)^ to this value, any state in the horizontal dominoes and the state in the center each contributes 
l/(2n + 1)^. Due to the symmetry, there are at least 2n vertical or horizontal dominoes and [(2n + 1)^ — l] /2 states 
in the horizontal dominoes. 

For the 2n x 2n system, the same result can be reached. That is to say there is a limitation in the probability 

of the success eavesdropping when the Hilbert space becomes large enough. And it is evident that in this strategy 
only particle A may be demolished, and particle B is not infected at all. The function of the operation to B which is 
depended on the result of the measurement on A is just to extract more information. 

Eve may adopt the complementary eavesdropping strategy, in which Eve try to eavesdrop some information by 
intercepting and operating only on the second particle B, which may cause demolition to it. Then for the set of 
states in n X n systems, whose graphic depictions are 4-fold rotation symmetric, the probability to eavesdrop some 
information without being detected is equal to that of the first strategy, i.e., P„. But for those states without such 
symmetry, it can be verified that one of the success probabilities for the complementary strategies is larger than P„. 
So we employ the symmetric states in the present scheme. 

Of course, there are other strategies, for example, she can hold up the first particle A and send out a substitute 
particle C to Bob. When B comes, she makes a collective measurement under the two-particle orthogonal basis, 
then sends out a particle D in the state of B. In this strategy, Eve can eavesdrop the information entirely, but the 
probability for she to pass the checking process is only 1/n, which tends to zero, for the state of particle C is randomly 
chosen from a n Hilbert space. 



IV. CONCLUSION 



We have proposed the general conditions for the orthogonal product states to be used in QKD, then presented a 
QKD scheme with the orthogonal product states of 3 x 3 system which has several distinct features, such as high 
efficiency and great capacity. The generalization to the n-state systems, and eavesdropping is analyzed where a 
peculiar limitation, 1/2, for the success probability of an efficient eavesdropping strategy is found as n becomes large 
enough. 
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Figure Captions: 

Figure 1: The graphical depiction of the set of orthogonal product states in the 3x3 Hilbert space. 
Figure 2: The graphical depiction of the set of orthogonal product states in the 4x4 Hilbert space. 
Figure 3: The graphical depiction of the set of orthogonal product states in the 5x5 Hilbert space. 
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